Be extremely careful about the script that you write into a page, especially if the script is generated or altered in response to user input.

• 对于写入某一页面的脚本一定要非常小心,特别是在为响应用户输入生成或更改该脚本的情况下。